<?xml version="1.0" encoding="utf-8"?>
<feed xml:lang="en-us" xmlns="http://www.w3.org/2005/Atom"><title>Simon Willison's Weblog: joe-walker</title><link href="http://simonwillison.net/" rel="alternate"/><link href="http://simonwillison.net/tags/joe-walker.atom" rel="self"/><id>http://simonwillison.net/</id><updated>2008-09-22T09:29:59+00:00</updated><author><name>Simon Willison</name></author><entry><title>Accessibility Experiment</title><link href="https://simonwillison.net/2008/Sep/22/sitepen/#atom-tag" rel="alternate"/><published>2008-09-22T09:29:59+00:00</published><updated>2008-09-22T09:29:59+00:00</updated><id>https://simonwillison.net/2008/Sep/22/sitepen/#atom-tag</id><summary type="html">
    
&lt;p&gt;&lt;strong&gt;&lt;a href="http://www.sitepen.com/blog/2008/09/22/accessibility-experiment/"&gt;Accessibility Experiment&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;
Joe Walker asks what would happen if we threw away the idea of serving the same accessible site to every user and instead tried building specific versions aimed at different disabilities.


    &lt;p&gt;Tags: &lt;a href="https://simonwillison.net/tags/accessibility"&gt;accessibility&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/joe-walker"&gt;joe-walker&lt;/a&gt;&lt;/p&gt;



</summary><category term="accessibility"/><category term="joe-walker"/></entry><entry><title>On-board vs. Off-board Comet</title><link href="https://simonwillison.net/2008/May/22/offboard/#atom-tag" rel="alternate"/><published>2008-05-22T17:02:12+00:00</published><updated>2008-05-22T17:02:12+00:00</updated><id>https://simonwillison.net/2008/May/22/offboard/#atom-tag</id><summary type="html">
    
&lt;p&gt;&lt;strong&gt;&lt;a href="http://cometdaily.com/2008/05/22/on-board-vs-off-board-comet/"&gt;On-board vs. Off-board Comet&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;
Useful distinction. On-board comet runs on the same server as the rest of your application; Off-board comet is served from a separate server (generally a subdomain) and a separate stack. If you want to stick with PHP, Rails or Django for the rest of your site off-board comet looks like the way to go.


    &lt;p&gt;Tags: &lt;a href="https://simonwillison.net/tags/comet"&gt;comet&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/django"&gt;django&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/joe-walker"&gt;joe-walker&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/php"&gt;php&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/rails"&gt;rails&lt;/a&gt;&lt;/p&gt;



</summary><category term="comet"/><category term="django"/><category term="joe-walker"/><category term="php"/><category term="rails"/></entry><entry><title>JSON is not as safe as people think it is</title><link href="https://simonwillison.net/2007/Mar/5/json/#atom-tag" rel="alternate"/><published>2007-03-05T22:51:55+00:00</published><updated>2007-03-05T22:51:55+00:00</updated><id>https://simonwillison.net/2007/Mar/5/json/#atom-tag</id><summary type="html">
    
&lt;p&gt;&lt;strong&gt;&lt;a href="http://getahead.org/blog/joe/2007/03/05/json_is_not_as_safe_as_people_think_it_is.html"&gt;JSON is not as safe as people think it is&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;
Joe Walker reminds us that even authenticated JSON served without a callback or variable assignment is vulnerable to CSRF in Firefox, thanks to that browser letting you redefine the Array constructor.


    &lt;p&gt;Tags: &lt;a href="https://simonwillison.net/tags/csrf"&gt;csrf&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/joe-walker"&gt;joe-walker&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/json"&gt;json&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/security"&gt;security&lt;/a&gt;&lt;/p&gt;



</summary><category term="csrf"/><category term="joe-walker"/><category term="json"/><category term="security"/></entry></feed>